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JOHN LITTLE 



Abstract. This note presents some new information on how the minimum 

distance of the generalized toric code corresponding to a fixed set of integer 

^_^ ■ lattice points S G K.^ varies with the base field. The main results show that 

Cn ' in some cases, over sufficiently large fields, the minimum distance of the code 

f^ ' corresponding to a set S will be the same as that of the code corresponding to 

fl~\ , the convex hull conv(S). In an example, we will also discuss a [49, 12, 28] gen- 

f^) • eralized toric code over Fg, better than any previously known code according 

' to M. Grassl's online tables, as of September 2011. 

(N 



1. Introduction 

jy^ ' We consider linear block codes over finite fields ¥q, that is, vector subspaces 

CJ , C C F" Following standard notation in coding theory, n will always denote the 

block length, and k will always denote the dimension of C as a vector space over F^. 

fvq , An [n, k, d] code is a linear code with block length n, dimension k and minimum 

^ ■ distanced. The book [9J is a good general reference for other coding theory concepts. 

^D , Toric codes are a class of m-dimensional cyclic codes introduced by J. Hansen 

^^ ' in [7], [5]. Hansen's description uses the geometry of toric varieties corresponding 

to polytopes, but toric codes may also be understood within the general context of 
evaluation codes. 

^^ ' Definition 1.1. Let P be a rational polytope (the convex hull of a finite set of 

integer lattice points), contained in [0, q — 2]™ C M™. Let Fg be a finite field with 
primitive element a. For / S Z™ with < fi < q~2 for all i, let pf — {a^^ , • ■ • , a-^" ) 
in (F^ )™ . For any e = (ei , . . . , Cm) G PnZ'" , let x'^ be the corresponding monomial 
and write 



The toric code over the field Fg associated to P, denoted by Cp{¥q), is the linear 
code of block length n = {q — 1)™ with generator matrix 

G = ((p/r). 

The rows are indexed by the e e P n Z™, and the columns are indexed by the 
Pf G (Fg^)"*. In other words, letting L — Spanja;'^ : e € P n Z™}, we define the 
evaluation mapping 

ev : L -^ ¥^''-^^^ 

g ^ {9{Ps):pse{¥^r) 
ThcnCp(Fg) = cv(L). 
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2 JOHN LITTLE 

If P is the interval [0, ^- 1] C K, then Cp(Fg) is the Reed-Solomon code RS{1, q). 
So toric codes are, in a sense, generalizations of Reed-Solomon codes. 

In considering code equivalences, the description of dual codes of toric codes, 
minimum distance bounds, etc. (see the articles cited below), one is naturally led 
to consider "generalized" toric codes, defined by the same construction, but using 
an arbitrary set S of integer lattice points in [0, q — 2]™ C K™ instead of the set 
of all lattice points in a convex polytope. We will use the parallel notation Cs(IFg) 
for these codes. If P = conv(5), then the code Csi^q) is a subcode of Cp(Fg). 
In algebraic geometry terms, the Cs(F^) can be defined using an incomplete linear 
system V C \Oxp{Dp)\, where Xp is the toric variety determined by P and Dp is 
the corresponding divisor class on Xp. 

The survey [13] covers most of the work on these codes contained in [11] , [12] , 
[l4] , [15] , [17] , and [1] . Not all toric codes or generalized toric codes are as good as 
Reed-Solomon codes from the coding theory perspective, but the class of generalized 
toric codes does contain some very good codes. See §2 below for a new example. 

From now on we will concentrate on the case m = 2. The principal new results of 
this note are some observations about the way the minimum distance of the gener- 
alized toric code Cs{^q) depends on q and how it relates to the minimum distance 
of Cp{¥q) if P = conv(5) and q is large enough. These rely on the connection 
between the minimum distance of toric codes and Minkowski sum decompositions 
of subpolytopes Q C P first noticed by Little and Schenck in [12] and later devel- 
oped and refined by Soprunov and Soprunova in J17l . The other ingredient is some 
statements about the distribution of polynomials in F^ [u] with given factorization 
patterns from ?. 

The main result will say that in many situations, and for large enough q, the 
"missing" lattice points in {P n Z") \ 5 do not always help, in the sense that 
d{Cs'{Pq)) can equal d(Cs(Fg)) for many S" D S. In particular, there are even 
situations where S' = P (1 Z" gives a code with the same minimum distance over 
all ¥q with sufficiently large characteristic. Read one way, for a fixed polytope P, 
our results say that the generalized toric codes for S* C P tend to give interesting 
results only over small fields. On the other hand, these results also can help to 
identify situations when a proper supercode of a generalized toric code has the 
same minimum distance. Hence they can be used to find improved examples with 
the same d but a higher code rate k/n. 

To conclude, we will also make some remarks about the toric and generalized toric 
codes from the "exceptional triangle" Tq studied in fTZ and the set S obtained by 
deleting the interior lattice point. In this case, when certain coefficients are nonzero, 
the polynomials that are evaluated to produce the codewords define elliptic curves. 
Some facts about numbers of points on elliptic curves over finite fields provide 
some interesting results in this case and provide some extra detail concerning the 
Minkowski decompositions in [T7]. In this case, we will see that the pattern of how 
Cs(Fg) depends on q is considerably more intricate. 

2. A NEW BEST KNOWN CODE 

One of the reasons for the interest in the toric code construction is that a num- 
ber of isolated examples of very good codes have been produced this way. For 
instance, using certain heuristic search methods, students at the MSRTUP 2009 
REU program found 
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Figure 1 . The set S and the polygon P in Example 12.11 

• an m = 3 generalized toric code over F5 with parameters [64, 8, 42], and 

• a.n m — 2 generalized toric code over Fs with parameters [49, 8, 34]. 
(Both are reported in [3] and, as of September 2011, arc still the best known codes 
for these n, k over these fields.) 

Here is a new, similar, example. 

Example 2.1. Consider the generalized toric code over Fg corresponding to the 
set 

S = {(3, 0), (4, 1), (0, 2), (1, 2), (2, 2), (0, 3), (1, 3), (4, 3), (5, 3), (0, 4), (2, 4), (4, 5)}, 

marked with solid circles in Figure 1. The polygon P is the convex hull of S, and 
contains nine lattice points other than the points of S, shown as empty circles. 
There are reducible sections of the line bundle Oxp{Dp) of the form 

/(x, y) = y^x'^{x - ai)(a:: - a2){x - 03) mod (x'^ - 1, j/^ - 1) 

with the Ui distinct and ai + a2 + 03 = 0. Since these have exactly 21 zeroes at the 
points in (Fg^)^, we see d{Cs{'^?,)) < 28. Using David Joyner's Magma procedures 
for toric codes ([H]), it can be checked that this is a [49, 12,28] code over Fg. In 
other words, polynomials in two variables that are linear combinations of the 12 
monomials corresponding to the points in S can have at most 21 zeroes at the 
points in (Fg^ )^. This improves the [49, 12, 27] code previously known according to 

3. Factorization patterns for polynomials in one variable 

In this section, we will adapt some known facts about the distribution of poly- 
nomials in Vq[u\ with given factorization patterns. The original source for these 
statements is [2; the survey [5 also contains a summary and discussion of the 
results we need. 

Let q = p^ and consider any linear family J- of polynomials of the form 

(3.1) fiu) = U^ + tiu'^i + • • • + tra-iu'''"-' + U^ 

in ¥q [u] , where 

(1) P>t, 

(2) the exponents £ > fci > • • • > km-i > km — are fixed, 

(3) the coefficients t^, 1 < i < m run over the finite field Fg, and 

(4) the £, fci, . . . , fc,„_i are not all multiples of some fixed integer j > I. 
Some natural questions in this context are: 

• What can be said about the number of elements of the family T that are 
irreducible in F, [u] ? 
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• More generally, what can be said about the number of elements of the family 
T that factor in Fq [u] into a given number of factors of given degrees? 

To describe the situation for the second question, we will say that a polynomial 
/(u) of degree I has factorization pattern 

A= l°i2°^ ■■■t\ 

where X)i=i a^ • * = ^, if in Fg[u], j(u) factors as a product of ai irreducible factors 
of degree i (not necessarily distinct) for each i = 1, . . . , £. Let 

j^lX) = - 

^ ' ai!---a£!l°i ■ ■ ■ t"^ 

be the proportion of elements of the symmetric group Sn with cycle decomposition 
of shape A. Then S. Cohen proved the following statement. 

Theorem 3.1 ([2, Theorem 3]). Let J- satisfy the conditions above, and let J-\ 
be the subset of F consisting of polynomials with factorization pattern A in Vq[u\. 
Then for all q sufficiently large, 

(3.2) |J-A|=r(A)g'" + 0(g™-^) 

where the implied constant depends only on i. 

For our applications, we want to study factorizations of shape A = Aq :— 1^ 
where, in addition. 



/(..) = J](7.-/3,) 



=1 



with /3i distinct in F^. Now the elements of the family T with repeated roots 
(possibly in some extension of Fg) correspond to F^-rational points 

(ii, . . . ,trn) C Pjr, 

where T^jr = V{Ajr) and 

Ajr = resultant(/(u), f'{u),u) 

is the discriminant of the family. Note that Vj: is an (m — l)-dimensional affine 
hypersurface, singular and possible reducible. However, when the characteristic 
p is large enough, it is known by ^ Theorem 3.1] that when the two conditions 
after p.l|) hold, Vj: can have at most one irreducible component other than the 
hyperplane V{t,n)- By the general bound in [5*, Proposition 12.1], it follows that 

(3.3) \DA^q)\ < <5^™-i, 

where 7r„_i = |P™-i(F,)| = g™-i + g™-^ + . . . + g + i, and J = deg A^ < 2^ - 2. 
(The bound (j3.3p . while sufficient for our purposes, is very weak. Tighter bounds 
based on a version of the Weil conjectures for singular varieties can also be found 
in [B].) We have the following result. 

Corollary 3.2. If p > £ and q — p^ is sufficiently large, there exist elements of the 
family J- C Fg[ii] with factorization pattern Aq = 1^ in which the irreducible factors 
are distinct, and for which all the roots are nonzero. 
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Proof. The first part of tliis comes from comparing tlie orders of growtli of the 
various terms in (|3.2p and p.3|) . The last part of this is clear since if any of the 
roots is zero, then the coefficient tm ~ 0, and the locus where that is true has 
dimension m — I. D 

Note that in particular the conclusion of the Corollary holds for all sufficiently 
large primes p. Hence there will be elements of the family T C ¥p [u] with factor- 
ization pattern Ao = 1^ in which the irreducible factors are distinct and for which 
all the roots are nonzero. 

Remark 3.3. If p does not satisfy the condition p > £, oi if the conclusion of 
the Corollary does not hold for some q, it is still always possible to find a finite 
extension of F, for which the statement of the Corollary holds. Namely, let f{u) be 
any one element of J^ with nonzero discriminant and nonzero constant term. If K 
is a sphtting field for f{u) over F^, then f{u) splits completely with nonzero roots 
in _?C[u]. 

Example 3.4. Consider the family JT consisting of polynomials of the form 

u* + tiU + t2 

in ¥p[u] for prime p. Note that J^ contains elements of factorization pattern Aq = 1 
with ii = whenever p = 1 mod 4, since then Fi^ contains 4th roots of unity. Doing 
computations in the Maple computer algebra system, we found that for all except 
5 of the primes p < 1000 and all p > 19, there are elements of J- of factorization 
pattern Aq = 1^, and with distinct roots. The obvious conjecture is that there 
are such polynomials for all p > 19. However, more precise information about 
the constants in the asymptotic result (|3.2p than is currently available would be 
necessary for a complete proof. When p > 5, a constant multiple of the discriminant 
of this family can be written as 

The variety Pjr = V{Ajr) is a singular curve of genus in the (ii, t2)-plane. There 
are exactly p — 1 pairs (fi, ^2) with tit2 7^ that make the discriminant equal 0. 

One interesting observation is that the number of polynomials of factorization 
pattern Aq = 1'*, and with distinct roots, is always divisible by p — 1. This follows 
because the mapping F^^ x F ^ F defined by 

(/3,/(u))^^rV(/3«) 

defines an action of Fi^ on T that preserves the factorization pattern, and for which 
all orbits have order p — 1. There are similar actions of V^ on all F of the form 
(13. 1[) studied here, so this is a general phenomenon. <) 

4. Application to generalized toric codes 

In this section we will apply Corollarv l3.2l to deduce some results about the min- 
imum distance of generalized toric codes. First we recall the main idea developed 
in [12] and [IT]. Given a polytope P, following [17], we define the full Minkowski 
length of P to be 

L{P) = max{^ I ag = Qi + • • • + Qi C P, dim g, > all i}, 
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where the addition signs refer to the Minkowski sum of polytopes. Theorem 2.6 
of ^7\ shows that for toric surface codes (ttt, = 2, so P C M^), the full Minkowski 
length of P is strongly tied to the minimum distance of Cp(Fg). In fact, if q is 
larger than an explicit lower bound depending on L{P) and the area of P, then the 
minimum distance of the toric code Cp(¥q) is bounded below as follows: 

(4.1) d{Cp{w,)) >{q- 1)2 - LiP){q - 1) - L2VgJ + 1, 

and if no maximally decomposable Q <Z P contains an exceptional triangle term (a 
triangle lattice equivalent to Tq = conv{(0, 0), (1, 2), (2, 1)}), then 

(4.2) d{Cp{¥,)) >{q- If - L{P){q - 1). 

Example 4.1. For instance, consider the polygon P from Example 12.11 It can be 
seen that L{P) — 6 and there is a unique Q <Z P with 6 Minkowski summands, 
namely the rectangle Q = conv{(0, 2), (4, 2), (4, 4), (0, 4)}, which is the Minkowski 
sum of four primitive lattice segments parallel to the x-axis and two primitive lattice 
segments parallel to the y-axis. The corresponding reducible sections of the line 
bundle Oxp {Dp) have the form 

y^{x - ai){x - a2){x - a3)(x - a4){y - Pi){y - ^2)- 

So in fact for q large enough, we will have 

d(Cp(F,)) = (g-l)2-6(g-l) + 8 

in this case. <^ 

Suppose we are in the relatively common case in which the minimum weight 
words in the toric code Cp(Fp) or Cp(¥q) come by evaluating polynomials that are 
linear combinations of monomials corresponding to a collinear string of £ consecutive 
lattice points in the polytope. This gives Q — Qi + ■ ■ ■ + Qg C P {s^ Minkowski 
sum of £ primitive line segments) . Say the corresponding monomials are 

u",...,u^+° 

for some monomial u — x^y'^ with gcd(r, s) = 1, and some integers £ and a > 0. The 
minimum weight codewords then are obtained by evaluating completely reducible 
polynomials in u: 

u°'{u — ai) • • • (li — ai) 

where a^ e F ?* are distinct. 

Now suppose that we remove some of lattice points between the endpoints in 
going to a subset S C P O Z'". The polynomials evaluated to obtain codewords 
of Cs(Fp) will contain linear combinations of some monomials u^ and u*"'* with 
£ > ki > ■ ■ ■ > km-i > km = (after removing the factor u" that has no zeroes in 
the torus {F^f). We obtain polynomials of the form 

(4.3) f{u)^u' + hu'''+...+tm. 

Note that £ < p—2 here by our convention that P C [0,p—2f. Hence the condition 
p > £ is automatically satisfied. In other words, provided that the other conditions 
on the exponents ki are satisfied, we have elements of a family J- of the same form 
as that considered in p.l|) . Then CoroUarv 13.21 immediately implies the following 
result. 
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Theorem 4.2. Let P he an integral convex polygon in M^ of full Minkowski length 
L{P) = L Suppose in addition that there is a unique Q <Z P which decomposes as a 
sum of (. nonempty polygons, and that each of them is a copy of a primitive lattice 
segment I , so Q — £1 . Let S <Z P C\l? satisfy 

(1) S contains the endpoints ofQ, and 

(2) The ki and t are not all multiples of any fixed integer j > 1. 

Then for all primes p sufficiently large and all h > 1, letting q = p^ , we have 

d{Cs{¥,)) - d(Cp(F,)) ^{q- 1)2 - i{q - 1). 

Moreover, for all q, there exists h > 1 such that the same statement is true if we 
replace q by q'^ . 

Note that hypothesis (2) here rules out the case m = 1. This is necessary, since 
polynomials of the form u + tm with tm y^ have £ distinct roots only when the 
field contains £th roots of unity, or equivalently when £\(q — 1). The conclusion of 
the theorem will also be valid in those cases, however. See Example 14.31 below for 
some examples. 

Proof. Corollary 13.21 implies that if p is sufficiently large the family J^ as in (14. 3p 
will contain elements of factorization pattern Aq = 1^ with distinct nonzero roots. 
The corresponding polynomials in x,y obtained by substituting u = x^y'^ will have 
the same sort of factorization. Since gcd(r, s) = 1, each factor x'^y^ — ai has exactly 
p—\ zeroes in {¥^ ^ ^nd the sets of roots for distinct ai are disjoint. Therefore for 
all sufficiently large p, the toric code will contain words of weight (p — 1)^ — £{p — 1) , 
and the minimum distance satisfies 

d{Cs{¥p))<{p~lf-£{p-l). 

The generalized toric code Cs(Fp) is a subcode of the code from the full polygon 
P. The lower bound from |17j quoted above in (|4.2|) gives the reverse inequality 
and the equality claimed in the statement follows for all p sufficiently large. The 
final part here follows by Remark 13.31 D 



Related statements along the lines of Theorem 14.21 apply in different situations 
depending on the shape of the Q giving the maximally Minkowski-decomposable 
subpolygon of P. However, we will not pursue them here. 

Example 4.3. Consider the generalized toric codes Cs(Fq) for the set S indicated 
with solid circles in Figure 2. 

The polygon P here is the quadrilateral P = conv{(0,0), (2,0), (3, 1), (1,4)}. It 
can be seen that the full Minkowski length of P is L{P) = 4, and P contains 
just one Minkowski sum of 4 indecomposable polygons, namely the line segment 
Q = conv{(l, 0), (1,4)}. By the results of Example l3.4[ and Theorem l4.2i we expect 
that 

d{Cs{¥p)) = d{Cp{¥p)) = {p- if - 4(p - 1) 
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Figure 2. The set S and the polygon P in Example 



for all p > 19 and all q = p^ for s > 4. The following results of Magma computations 
indicate what happens for p < 19, and also for the prime powers 7 < q < 19: 

z2 



diCsiWr)) = 18 

d{Cs{¥s)) = 33 

d{Cs{¥^))=32 

d{Cs{¥n)) = 70 

d{Cs{¥i3)) = 96 

d(Cs(Fi6)) = 165 

d(Cs(Fi7)) = 192 

d{Cs{¥,g)) = 270 



vs. 



vs. 



vs. 



vs. 



6" 



4-6 = 12 



7^ - 4 • 7 = 21 



10^ 
12^ 
152 
16^ 
18^ 



-4- 
-4 
-4 
-4 
-4 
-4 



. = 32 
10 = 60 
12 = 96 

15 = 165 

16 = 192 
18 = 252. 



Over F7, 
pattern Aq 



with ^2 7^ and factorization 
contains cube roots of unity. 



there are no polynomials u^ + tiu + ^2 
= I"'. Since 7=1 mod 3, however, F7 
Hence, minimum weight codewords in that case come from polynomials of the form 

xy{y^ - /3). 

Over Fg, the minimum weight codewords come from genus 5 curves with 16 
Fg-rational points in the torus (Fg^)^. 

The codes over FqjFis, and F17 all have d = {q — l)^ — 4:{q — 1). Since these q 
all satisfy g = 1 mod 4, these fields contain 4th roots of unity and hence there are 
w* + tiu + 12 with factorization pattern Ao = f* with ii = and ^2 ^ 0. Minimum 
weight codewords come from polynomials of the form x{y — /3) with /3 ^ 0. 

The code over Fn illustrates the fact that while there are polynomials u'^ +tiu+t2 
with factorization pattern Aq = 1* over this field, all such polynomials have a 
repeated root. Therefore the minimum codeword weight is {q— 1)^ —3(17— 1) rather 
than (g-l)2-4(g-l). 

The code over Fig illustrates the comment from Remark 13.31 Note that Fig is 
the splitting field of the polynomial y* + y + 1 over F2. Hence we obtain words of 
weight 15^ — 4 • 15 in this code too. 

Finally, the code over Fig has some words of weight 270 from evaluation of 
polynomials xy{y^ — j3) since 19 = 1 mod 3. (There are also several polynomials 
y^+tiy+t2 that have factorization patterns Aq = 1"*. However all of the polynomials 
that do factor that way have repeated roots.) (} 



5. The exceptional triangle 

We will now consider what happens for polygons P where a maximal Minkowski- 
decomposable subpolygon Q has a Minkowski decomposition involving the triangle 
To = conv{(0, 0), (1, 2), (2, 1)}. This is affine equivalent to the triangle used in [17] 
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:t 



I I I I I I 



Figure 3. The exceptional triangle Tq and the set S. 



(see Figure 3). We will use this form because of its relation to the well-known 
Hessian family of elliptic curves. 

This is the only case in the plane where a Minkowski-indecomposable polygon 
contains an interior lattice point, namely (1, 1). Hence we will begin by comparing 
d(CTo(Fq)) and d[Cs{^q)) where S = {(0, 0), (1, 2), (2, 1)}, omitting the interior 
lattice point. The presence of the interior lattice point in Tq n Z^ shows that we are 
considering curves of (arithmetic) genus 1. Hence the theory of elliptic curves will 
be important. The facts about elliptic curves over finite fields that we will need 
can be found in [16j and jTOj . 

The projective completions of the curves defined by the linear combinations of 
monomials corresponding to the lattice points in Tq form the family of cubic curves 
defined by homogeneous equations: 

(5.1) ax^y + hxy^ + cxyz + dz^ = 0. 

If at least one of the coefficients a, &, d vanishes, there are at most g — 1 affine 
Fg-rational points with nonzero coordinates on the corresponding curve. It follows 
that 

d(CTo(F,))<(<z-l)^-(9-l) 

and similarly 

(5.2) d{Cs{^,))<{q-lf-{q-l). 

Hence, we want to concentrate on the cases with abd ^ 0, but c possibly in the 
case of To, and c = for the case of S. Thinking along the lines of our earlier 
results, we pose the following question. 

Question 5.1. For sufficiently large primes p, or sufficiently high powers q = p^ , 

is 



d(C5(F,))=d(CTo)? 



Equivalently, do we expect curves in the family (|5.1|) with c = to achieve the 
maximum number of Fp- or Fg-rational points (among curves in the family)? 

Example 5.2. Some experimentation using Magma reveals that the answer to this 
question is not at all clear at first. As in the discussion above, Tq is the exceptional 
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triangle, and S is the set of vertices, omitting the interior lattice point. 



d(C5(F5))-12 vs. d{CTo 

d(Cs(¥7))^27 vs. d{CTo 

d{Cs{¥s)) = ^2 vs. d{CT„ 

d(Cs(¥g))^ 56 vs. d{CTo 

d{Cs{¥n)) = 90 vs. diCTo 

d{Cs{¥,3)) = 126 vs. d{CT„ 

d{Cs{¥i6))=207 vs. d{CTo 

d{Cs(¥,j)) = 24Q vs. d{CTo 

d{Cs{¥ig))=300 vs. d{CTo 

(i(Cs(F23))=462 vs. d{CTo 



Fg)) = 10 

F7)) = 27 
Fg)) - 40 
Fg)) = 52 
Fii)) = 85 
F13)) = 126 
Fie)) = 204 
F17)) = 235 
F19)) = 300 
F23)) = 454. 



Note that the minimum distance of the code from S is sometimes greater, and 
sometimes the same as the minimum distance of the code from Tq. <^ 

We will see that there are arbitrarily large q for which d{Cs{¥q)) > d{CTo{¥q))- 
To prove this, we begin with some general observations. Much of this has been 
noted before in Theorem 2 of [1] , but not in the context of the possible Minkowski 
decompositions studied in |17j . Since we assume abd 7^ 0, to normalize, we will take 
d^ 1. 

There are three distinct points on the curve on the line at infinity z = in all 
cases (that is, whether or not c — 0). All three of them are flexes, and the lines 
X — 0, y = 0, ax + by + cz = are the inflectional tangents. So the points in the 
torus {¥^ )^ are all the afSne points of the curve. 

If abd ^ but c = 0, then the curve is smooth of genus 1. This can be seen since 
the system defining the Jacobian ideal: 

2axy + by — y{2ax + by) = 

ax'^ + 2bxy = x{ax + 2by) = 

3z2 ^ 0. 

implies z = 0. But, by (1), the curve must be smooth, since all three points on the 
line at infinity are smooth points. 

If c ^ 0, there are also singular (nodal) cubics in the family. In this case the 
Jacobian system has the solution 



— c — c 

Aa 3b 

Substituting into the equation of the curve, we get 



z = 1. 



27a6 27a6 



c 
9ab 



1 = 0. 



so if c^ = —27ab, the curve has a singular point at the point with homogeneous 
coordinates 

If the origin of the group structure on the points of a smooth cubic curve is 
placed at an inflection point, the other inflection points are points have order 3. 
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Since the 3-torsion points form a subgroup of the group of Fg-rational points, we 
have the fohowing statement. 

Lemma 5.3. For all the smooth elements E of the fam,ily (5. 1]) overWq, the number 
of ¥ q-rational points is divisible by 3. 

The discussion of §4.2 of ^lOj shows, in fact, that the family (|5.1|) is a sort 
of universal family for elliptic curves over F^ with nontrivial 3-torsion subgroups. 
Every isomorphism class of such curves is represented by some element of our family. 

li p > 3, by an easy change of coordinates, the equations (j5.ip can be put 
into Weierstrass form. Namely, dehomogenize with respect to x, and complete the 
square in y. If p > 5, by a further change of coordinates, the Weierstrass form can 
be taken to 

u'^ ^v^ + Av + B. 
If c = to start, then after this change of coordinates it will be true that A — 0. 

The j-invariant of an elliptic curve in this form is 

4A3 
^ ^ "^ 4A3 + 27B2 ■ 
Hence j = if and only if A = 0. . 

When q = 2 mod 3 for an odd prime power q, elliptic curves with j = are su- 
persingular elliptic curves (see Proposition 4.31 of 18 ). There are many equivalent 
characterizations of this property and it follows that 

j'^ + 1 h odd 

\E{¥gH)\ = lq'' + l + 2q^/'^ if /i = 2 mod 4 



.1 



h I 1 0„h/2 



1 - 2g''/2 [fh = mod 4. 



In other words, supersingular elliptic curves defined over ¥g achieve the Hasse-Weil 
upper bound over F^h when h = 2 mod 4. On the other hand, they achieve the 
Hasse-Weil lower bound over F^h when h = mod 4. 

The above observations show that the answer to our Question 15.11 is negative, 
because of some subtle arithmetic facts concerning the numbers of points on certain 
elliptic curves! Some of the following reasoning also appears in the proof of Theorem 
2 in ^IJ. 

Theorem 5.4. Let q be odd and q= 2 mod 3. Then 

diCsi¥q)) = (q-lf -iq-l)> rf(CT„(F,)). 

Proof. If q is odd and q = 2 mod 3, then because the corresponding elliptic curves 
are supersingular (and recalling that we must subtract the three points at infinity) 
all of the codewords of Cs{¥q) obtained from evaluation of axy^ + bxy^ + d with 
abd ^ will have weight 

{q~lf-{q+l-3)>{q-l)^-{q-l). 

On the other hand, by (15. 2p there are also codewords of weight {q — 1)^ — (g — 1) 
from polynomials with one coefficient equal to zero. Those give the minimum weight 
words in this case. 

On the other hand, we need to determine the minimum distance of C'tq i^q)- By 
the theorem of Waterhouse (Theorem 4.1 of [Hj), we know that there are elliptic 
curves over F^ with 

\E{Vq)\^q+l + t 
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Figure 4. A Minkowski sum with the exceptional triangle. 



for all integers t with t < [2^^] and gcd{t,q) = 1 (as well as some other pos- 
sibilities). By Lemma 15.31 and the universality of our family p.ip for curves with 
nontrivial 3-torsion, there will be curves here with q-\-l + t points rational over F^ if 
t is the largest integer satisfying t < [2y^\ , t prime to q, and such that 3\{q + l + t). 
These give codewords of considerably smaller weight, in some cases close to 

So the minimum distance of the code from S will be strictly larger than that of the 
code from Tq for all such q. D 



Example 5.5. For instance, refer again to Example 15.21 With p = 17 = 2 mod 3, 
Theorem \5l\ applies. The largest t such that t < [2^/l7J and 3|(17 + 1 + i) is 
i = 6. There are elliptic curves in the family (|3.ip with 24 Fiy-rational points 
and hence 21 points in (F{^)^ disregarding the three points at infinity. This gives 
d{CToiVir)) = 16^ - 21 = 235. However, d(Cs(Fi7)) = IG^ - 16 = 240. 

On the other hand, when q is odd and = 1 mod 3, the elliptic curves with j ~ 
are not supersingular. And in fact the minimum weight words in Cto i^q) sometimes 
come from Cs(Fg) in this case. (} 

We conclude with a final remark. Phenomena similar to those seen in Theo- 
rem [531 in which d{Cs{^q)) > d{Cp{¥q)) can occur for arbitrarily large q, also 
occur in polygons for which the maximal Minkowski-reducible subpolygon Q con- 
tains a To summand. 

Example 5.6. Consider the Minkowski sum P = Tq + I, where / is the interval 
/ = conv{(0,0), (1,0)}, shown in Figure 4. We study the generalized toric codes 
for 

s^{pnz^)\{{i,i)} 

obtained by removing one of the two interior lattice points from P. 

For aU odd q = 2 mod 3, we will again have d(Cs(F,)) > d{Cp{¥g)). The 
minimum distances of the two codes over small fields are as follows. 
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d{Cs{¥r)) = 22 vs. diCpiWj)) = 21 

d(Cs (Fg)) - 36 vs. d{Cp{¥s))=33 

d{Cs{¥9)) ^ 48 vs. d{Cp{¥g)) = 44 

d(Cs(Fii)) - 80 vs. rf(Cp(Fii)) = 75 

rf(Cs(Fi3)) - 114 vs. d(Cp(Fi3)) - 114 

d{Cs{¥iQ)) = 192 vs. d{Cp{¥ie)) = 189 

d{Csi¥i7)) = 224 vs. d(Cp(Fi7)) = 219 

rf(Cs(Fi9)) = 282 vs. rf(Cp(Fi9)) = 282. 

Note that P contains the two term Minkowski sum conv({(l, 0), (1, 2)}), as well 
as several other Minkowski decomposable parallelograms. If instead of this S we 
consider R consisting of the 5 noninterior lattice points in P, then codewords ob- 
tained by evaluating reducible linear combinations of the corresponding monomials 
have the minimum possible weights 

{q-l)'-2iq-l) 
in many of these cases, since there are reducible polynomials of the form 

x{y- ai){y -a2) 
with ai 7^ Q!2 and ai + 012 — Q whenever q is odd. These have 2{q — 1) zeroes in 

i^^Y- 
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